Edition E — for-everyone/¶
Projected from ../SKELETON.md per ../audience-profiles.md.
| ID | Section | Dial |
|---|---|---|
| S1 | What agentteams security is | Light |
| S2 | Two surfaces and where enforcement lives | Light |
| S3 | The Constitutional Core (C-1..C-5) | Light |
| S4 | Instruction-authority ordering (decision rule) / (presence + reachability audited) | Light |
| S5 | The @security sentinel (contract) / (most S-rules are judgment) | Light |
| S6 | HALT finality and capability limits (enforced) | Light |
| S7 | The authorization triad | Light |
| S8 | Security decisions log and the CONDITIONAL PASS lifecycle | Light |
| S9 | Signed waivers | Light |
| S10 | Capability grants | Light |
| S11 | The destructive-operation gate | Light |
| S12 | The intelligence-freshness gate | Light |
| S13 | Shrink-policy: protecting enriched fenced content | Light |
| S14 | Bridge-refresh safety (policy) / (operator Pre-Flight) | Light |
| S15 | The content scanner (agentteams.scan) | Light |
| S16 | Live-data redaction and feed sanitization | Light |
| S17 | The infrastructure-layers model (reference doc) | Light |
| S18 | Sandbox emission and privilege profiles (Linux deny-tested) / (macOS Seatbelt unverified, Windows design-only) | Light |
| S19 | The constitutional-gate hook (fail-closed under confined/exclusive; fail-open by default) | Light |
| S20 | Threat-intelligence watch | Light |
| S21 | Red-team methodology | Light |
| S22 | Integrity manifests | Light |
| S23 | Provenance stamps (library / pattern, not auto-wired into the default emit path) | Light |
| S24 | Backups and baselines | Light |
| S25 | Defense-in-depth: how the layers compose | Light |
| S26 | Glossary | Light |
| S27 | Sources | Skip |